security-hardening

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several well-known and standard libraries for web development and security, including zod, isomorphic-dompurify, argon2, jose, @upstash/ratelimit, @upstash/redis, and nanoid.
  • [DATA_EXFILTRATION]: The Content Security Policy (CSP) configuration example includes the domain https://api.frankx.ai in the connect-src directive. This is a vendor-owned resource associated with the skill author.
  • [CREDENTIALS_UNSAFE]: The skill correctly identifies hardcoded credentials as an anti-pattern and recommends the use of environment variables for secret management, which is a standard safe practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:15 AM